$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft File: JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft (raw, json) Hash identifier: zTwP2OgfFOh3UrTZqPbtUm/1j5AFNSraGS6DqFMQoic= Subject key identifier: 9A:1A:88:B5:75:22:A8:6D:9A:53:02:28:6D:E9:32:08:91:BF:DD:95 Authority key identifier: 24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA Certificate issuer: /CN=A91AC73E/serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA Certificate serial: 04E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft Manifest number: 04DC Signing time: Sat 09 Aug 2025 00:14:41 +0000 Manifest this update: Sat 09 Aug 2025 00:14:40 +0000 Manifest next update: Sat 16 Aug 2025 00:14:40 +0000 Files and hashes: 1: JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl (hash: P2jYbxb7aLqG1gCiyi3RS3vSU1/1HvG7Co2lzbxjHQ8=) 2: 020CA7B24E4C11EC8045E71EC4F9AE02.roa (hash: tyZWDAn9bcgruEQUmKMpj2KMCjpkdyP72IeeYTIEOW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC73E, serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA Validity Not Before: Aug 9 00:14:40 2025 GMT Not After : Aug 16 00:14:40 2025 GMT Subject: CN=689692f1-6427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e9:e4:56:61:b4:d8:ec:26:2c:4f:b3:ca:3f: 89:a7:a3:d6:4b:70:32:f0:2c:f3:17:ee:23:b9:a6: 70:0a:2b:fd:e7:c9:e2:31:cb:eb:3e:1a:ab:eb:79: 65:f3:02:9e:76:db:2e:4d:38:21:53:4f:5e:7a:d3: b8:b4:f8:3d:72:f1:6c:e2:a0:8f:0a:45:a6:bd:b1: a5:ea:a6:23:1b:2e:b7:dc:58:38:1e:de:26:8d:aa: 19:61:72:52:73:67:f1:70:c1:02:1b:2b:fe:c0:15: e8:c5:96:5e:f2:f5:90:29:40:b2:99:83:a8:bc:5a: 99:84:24:9d:69:e7:0c:fd:63:3f:32:01:e9:1c:3d: ba:cc:50:6d:2e:16:dc:85:c6:28:52:26:bf:be:85: 0d:b0:5e:49:ff:5b:f3:b7:bf:51:e2:c2:74:93:e5: d0:b8:38:3c:e6:b0:76:ec:70:4d:c2:db:37:5d:d9: 1c:98:04:4d:cd:62:2e:05:4a:a9:7d:67:6c:70:cf: 01:42:a3:ff:8e:02:3b:24:fc:56:9a:dd:ea:3a:c0: 92:44:9b:96:a9:2a:8d:fa:28:97:ab:89:07:ad:87: 77:85:7f:56:94:86:79:fb:4a:a2:90:cf:38:2f:27: e4:5a:be:59:ec:d9:e2:cc:38:7b:3d:41:5a:a1:0e: db:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1A:88:B5:75:22:A8:6D:9A:53:02:28:6D:E9:32:08:91:BF:DD:95 X509v3 Authority Key Identifier: keyid:24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9d:73:48:3c:db:87:f1:7a:82:b8:56:4d:35:af:a0:3b:c2: 3b:60:ab:c9:ee:29:c2:1c:71:1c:99:c0:a5:9f:2f:3c:05:33: b1:2d:d4:b3:42:57:ee:ba:a0:2e:ea:a6:c3:aa:64:13:77:17: 95:23:70:d0:09:49:f6:bb:25:e6:06:41:a3:f5:41:15:25:09: 46:63:e5:e3:23:f5:fb:ba:c5:6e:14:2d:24:c8:13:b4:2b:3c: 47:58:91:f6:a5:72:62:14:19:a3:f7:a0:11:a1:9c:11:6b:71: 0c:62:5a:fc:ff:3c:0f:3a:f4:cd:06:a9:58:05:b5:a4:27:c5: 38:7e:73:f3:5a:f9:01:b7:7e:49:e3:d5:f7:c6:9d:70:59:24: 8c:5e:e1:d7:33:5e:c6:9a:60:91:15:7a:3e:3f:66:c4:fc:05: 62:c6:ea:d5:04:71:a9:70:bd:cc:46:da:09:b5:42:fd:26:e7: 45:a7:91:c6:5a:44:c4:da:a6:8d:96:07:27:18:e7:33:49:cb: fc:7b:ad:f0:4a:3c:da:95:c9:c8:47:53:22:b9:2a:ad:7e:fb: f9:36:b0:2e:14:db:a5:ec:04:0a:04:ff:8d:36:d6:84:93:85: 66:13:f2:78:5d:e3:87:60:65:c9:74:2f:2f:32:6e:93:28:18: ae:38:e1:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM3M0UxMTAvBgNVBAUTKDI0M0YyRDQ0NzI3RjFEMUI4MDc5RjQwMTRGNjlGNEEw NzREMUYxRUEwHhcNMjUwODA5MDAxNDQwWhcNMjUwODE2MDAxNDQwWjAYMRYwFAYD VQQDEw02ODk2OTJmMS02NDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+nkVmG02OwmLE+zyj+Jp6PWS3Ay8CzzF+4juaZwCiv958niMcvrPhqr63ll 8wKedtsuTTghU09eetO4tPg9cvFs4qCPCkWmvbGl6qYjGy633Fg4Ht4mjaoZYXJS c2fxcMECGyv+wBXoxZZe8vWQKUCymYOovFqZhCSdaecM/WM/MgHpHD26zFBtLhbc hcYoUia/voUNsF5J/1vzt79R4sJ0k+XQuDg85rB27HBNwts3XdkcmARNzWIuBUqp fWdscM8BQqP/jgI7JPxWmt3qOsCSRJuWqSqN+iiXq4kHrYd3hX9WlIZ5+0qikM84 LyfkWr5Z7NnizDh7PUFaoQ7bvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJoaiLV1 IqhtmlMCKG3pMgiRv92VMB8GA1UdIwQYMBaAFCQ/LURyfx0bgHn0AU9p9KB00fHq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzczRS80NDU1NDU2MjJD OTUxMUVDQkVCQzQyNDhDNEY5QUUwMi9KRDh0UkhKX0hSdUFlZlFCVDJuMG9IVFI4 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pEOHRSSEpfSFJ1QWVmUUJUMm4wb0hUUjhlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzczRS80NDU1NDU2MjJDOTUxMUVDQkVCQzQyNDhDNEY5QUUwMi9KRDh0UkhKX0hS dUFlZlFCVDJuMG9IVFI4ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfnXNIPNuH8XqCuFZNNa+gO8I7YKvJ7inCHHEcmcClny88BTOxLdSz QlfuuqAu6qbDqmQTdxeVI3DQCUn2uyXmBkGj9UEVJQlGY+XjI/X7usVuFC0kyBO0 KzxHWJH2pXJiFBmj96ARoZwRa3EMYlr8/zwPOvTNBqlYBbWkJ8U4fnPzWvkBt35J 49X3xp1wWSSMXuHXM17GmmCRFXo+P2bE/AVixurVBHGpcL3MRtoJtUL9JudFp5HG WkTE2qaNlgcnGOczScv8e63wSjzalcnIR1MiuSqtfvv5NrAuFNul7AQKBP+NNtaE k4VmE/J4XeOHYGXJdC8vMm6TKBiuOOG5 -----END CERTIFICATE-----Generated at Sat Aug 9 02:54:30 2025 by rpki-client